WhatsApp is suing the world’s top hacking company

WhatsApp is suing the Israeli hacking company NSO Group in US federal court, the head of WhatsApp, Will Cathcart, announced in the Washington Post today.

WhatsApp accuses NSO Group of exploiting a vulnerability to target approximately 1,400 phones and devices with “malware designed to infect with the purpose of conducting surveillance on specific WhatsApp users.” You can read the complaint here from WhatsApp, which is owned by Facebook.

The hack allowed NSO Group and its customers to spy on messages, emails, and phone calls, as well as the cameras and microphones of the devices in question.

“There was another disturbing pattern to the attack, as our lawsuit explains,” Cathcart wrote. “It targeted at least 100 human-rights defenders, journalists and other members of civil society across the world.”

NSO Group, owned by the parent company Q Cyber Technologies, is an Israeli firm that’s become a world leader in building malware that targets mobile phones and devices. It operates around the world and with a wide variety of governments.

The list of publicly known customers and victims has made NSO infamous: Ahmed Mansoor, a human rights activist in the United Arab Emirates, is serving a 10-year prison sentence after NSO malware was reportedly used to repeatedly spy on him.

The complaint centers on what WhatsApp lawyers say is NSO Group’s unauthorized access and use of WhatsApp servers in order to emulate legitimate network traffic and WhatsApp calls as part of the operations to infect targeted devices. Malicious code concealed within the calls was the infection.